PT-2023-12580 · Unknown+1 · Asp Bootloader+1

Published 2023-11-14 · Updated 2024-07-09 · CVE-2021-46766

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ASP Bootloader (affected versions not specified)

Description The issue is related to the improper clearing of sensitive data in the ASP Bootloader, which may expose secret keys to a privileged attacker accessing ASP SRAM. This could potentially lead to a loss of confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2021-46766

SUSE-SU-2023:4654-1

SUSE-SU-2023:4655-1

SUSE-SU-2023:4660-1

SUSE-SU-2023:4664-1

SUSE-SU-2023:4665-1

SUSE-SU-2024:2376-1

Affected Products

Asp Bootloader

Suse

References · 33

• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-5001 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4655-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2376-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4665-1 · Vendor Advisory
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-4002 · Vendor Advisory
• https://amd.com/en/corporate/product-security/bulletin/AMD-SB-3002 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4654-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4664-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4660-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46766 · Security Note
• https://osv.dev/vulnerability/CVE-2021-46766 · Vendor Advisory
• https://t.me/cvenotify/83676 · Telegram Post
• https://suse.com/security/cve/CVE-2021-46766 · Note
• https://suse.com/security/cve/CVE-2023-20519 · Note
• https://suse.com/security/cve/CVE-2023-20526 · Note